Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File:                     FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier:          osTWetxV5ErmA57nX7FOFUUhLxaRZpGhqEdrKr9KdQs=
Subject key identifier:   76:42:B0:52:60:81:56:4C:A3:5C:94:9A:5E:52:8F:E3:7F:13:9D:D6
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer:       /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial:       01901BFF292EF45F4BE75D5282748B94B048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number:          11BF
Signing time:             Sat 15 Jun 2024 13:03:45 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:45 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:45 +0000
Files and hashes:         1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: bHDCn5MN034jtUJdauQPWWIAWHZ9fBnBKXWvrD0UZbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:29:2e:f4:5f:4b:e7:5d:52:82:74:8b:94:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
        Validity
            Not Before: Jun 15 13:03:45 2024 GMT
            Not After : Jun 16 13:03:45 2024 GMT
        Subject: CN=7642b0526081564ca35c949a5e528fe37f139dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:e8:01:7b:bc:29:94:af:5e:23:e7:09:5a:
                    05:44:11:a7:fd:1e:1c:34:3c:f7:48:63:6a:45:11:
                    2d:39:bd:df:f6:7a:eb:ac:ec:32:33:2c:75:0b:a5:
                    a6:19:56:dd:2e:f6:81:0d:ef:b4:3b:1d:0a:c4:f8:
                    6c:68:a3:70:69:57:47:76:58:24:e4:e3:d2:a5:42:
                    33:28:e5:51:ce:c6:9a:c4:5d:89:fc:8e:7b:6b:8a:
                    62:8a:3a:71:81:e8:4f:c9:e8:bb:54:b0:1e:f5:c3:
                    22:51:67:e8:3e:64:ae:28:47:84:a2:d0:28:74:c0:
                    3c:5a:7b:ac:68:07:95:1a:1c:95:55:5f:7c:37:26:
                    45:38:af:09:e2:fa:f0:2a:14:65:60:9f:c9:28:8c:
                    c6:1f:f9:8b:2f:5d:6e:98:4b:ba:6c:d7:96:85:da:
                    51:b9:7c:cc:95:49:21:d1:38:d7:de:0e:b1:42:a9:
                    91:af:a6:c3:4e:ed:db:94:83:29:09:58:e8:e7:3d:
                    3b:a0:49:67:51:26:40:f6:12:b8:ad:fd:51:27:b5:
                    ac:d6:49:74:ac:c9:83:d4:27:b1:01:78:90:23:c4:
                    a7:88:17:5c:96:83:60:a2:fd:00:ff:5a:af:fb:1d:
                    0c:5a:14:e8:d8:85:7a:8d:64:06:19:cd:93:69:a4:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:B0:52:60:81:56:4C:A3:5C:94:9A:5E:52:8F:E3:7F:13:9D:D6
            X509v3 Authority Key Identifier:
                keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:ab:63:d0:6e:ce:47:9f:4c:1a:29:9d:44:b0:26:80:00:
         9e:ef:cb:4b:6c:c1:67:54:bd:66:a7:d7:a3:5c:53:ed:9b:ae:
         c3:3f:3b:f3:0b:98:5e:e4:5d:f4:e8:69:53:e8:17:70:f0:17:
         ac:76:fb:c6:5e:61:e1:f6:89:21:86:8f:5e:27:df:19:86:cd:
         69:5c:c3:de:bb:98:ab:fe:c8:11:50:23:e4:1d:32:9a:8a:9a:
         dd:db:17:b3:5e:9a:36:99:06:c4:f6:90:e5:4d:58:dd:ad:44:
         26:40:d8:88:b0:79:69:4c:63:bd:69:d3:e7:85:ac:11:69:db:
         a7:fa:b4:10:2c:ea:47:4d:7e:bc:9d:ac:15:df:48:74:32:b3:
         1f:62:d2:75:77:68:1e:d9:fa:a7:51:4b:a3:c8:23:b6:00:b9:
         d1:14:3e:18:a2:b2:78:77:03:d7:39:fb:9b:dd:12:75:b1:50:
         df:b6:b4:dd:3b:0c:66:79:94:2c:ba:7f:ce:b9:11:7b:78:47:
         58:ca:1d:fa:05:a3:54:98:b5:2f:65:f1:56:bd:8e:12:82:03:
         ad:66:de:35:48:fd:9b:20:15:ee:a4:8e:6e:f4:22:52:d5:65:
         3d:93:de:a0:82:ce:ff:83:b9:94:b2:d5:77:da:43:c2:bd:29:
         a9:58:fe:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/yku9F9L511SgnSLlLBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzk2NWVkZjI4MTdjNWZmMDk2NmYyMmQ3MmIxY2E4OGUw
ZDM3MmMwHhcNMjQwNjE1MTMwMzQ1WhcNMjQwNjE2MTMwMzQ1WjAzMTEwLwYDVQQD
Eyg3NjQyYjA1MjYwODE1NjRjYTM1Yzk0OWE1ZTUyOGZlMzdmMTM5ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfToAXu8KZSvXiPnCVoFRBGn/R4c
NDz3SGNqRREtOb3f9nrrrOwyMyx1C6WmGVbdLvaBDe+0Ox0KxPhsaKNwaVdHdlgk
5OPSpUIzKOVRzsaaxF2J/I57a4piijpxgehPyei7VLAe9cMiUWfoPmSuKEeEotAo
dMA8WnusaAeVGhyVVV98NyZFOK8J4vrwKhRlYJ/JKIzGH/mLL11umEu6bNeWhdpR
uXzMlUkh0TjX3g6xQqmRr6bDTu3blIMpCVjo5z07oElnUSZA9hK4rf1RJ7Ws1kl0
rMmD1CexAXiQI8SniBdcloNgov0A/1qv+x0MWhTo2IV6jWQGGc2TaaS7pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZCsFJggVZMo1yUml5Sj+N/E53WMB8GA1UdIwQY
MBaAFBV5Ze3ygXxf8JZvItcrHKiODTcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhsbDdmS0JmRl93bG04aTF5c2NxSTROTnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYmNlMzAtMTNkMi00MjVhLThmYTMt
MzFhMGFiNDhhNTJmLzEvRlhsbDdmS0JmRl93bG04aTF5c2NxSTROTnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xYmNlMzAtMTNkMi00MjVhLThmYTMtMzFhMGFiNDhhNTJm
LzEvRlhsbDdmS0JmRl93bG04aTF5c2NxSTROTnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2+rY9Bu
zkefTBopnUSwJoAAnu/LS2zBZ1S9ZqfXo1xT7Zuuwz878wuYXuRd9OhpU+gXcPAX
rHb7xl5h4faJIYaPXiffGYbNaVzD3ruYq/7IEVAj5B0ymoqa3dsXs16aNpkGxPaQ
5U1Y3a1EJkDYiLB5aUxjvWnT54WsEWnbp/q0ECzqR01+vJ2sFd9IdDKzH2LSdXdo
Htn6p1FLo8gjtgC50RQ+GKKyeHcD1zn7m90SdbFQ37a03TsMZnmULLp/zrkRe3hH
WMod+gWjVJi1L2XxVr2OEoIDrWbeNUj9myAV7qSObvQiUtVlPZPeoILO/4O5lLLV
d9pDwr0pqVj+7w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:04 2024 by rpki-client on console-fra.rpki-client.org